On Wednesday 2011-11-02 14:18, Sergey Naumov wrote: >Hello. > >Is there is a place in linux kernel where I can determine whether >packet was dropped or not? >Looking at source code I can guess that if we got NF_DROP while >iterating through chains, we can determine that packet was droppped, >but what about NF_STOLEN? Can stolen packets be accepted? NF_{ACCEPT,DROP,STOLEN} are all mutually exclusive verdicts. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html